Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in findmate (npm)
- Aug 14, 2025
Malicious code in findall (npm)
- Aug 14, 2025
Malicious code in find-images.js (npm)
- Aug 14, 2025
Malicious code in finally-sed-process-good-container (npm)
- Aug 14, 2025
Malicious code in finally-parse-star-tau-zero (npm)
- Aug 14, 2025
Malicious code in finally-enum-byte-kappa-load (npm)
- Aug 14, 2025
Malicious code in final-sigma-warn-emulate-big (npm)
- Aug 14, 2025
Malicious code in final-lambda-java-fast-gamma (npm)
- Aug 14, 2025
Malicious code in final-html (npm)
- Aug 14, 2025
Malicious code in final-abstract-info-benchmark-gamma (npm)
- Aug 14, 2025
Malicious code in finacle (npm)
- Aug 14, 2025
Malicious code in fin-vue-cli (npm)
- Aug 14, 2025
Malicious code in fin-heytap-official (npm)
- Aug 14, 2025
Malicious code in fimanagementservice_ca-paypal (npm)
- Aug 14, 2025
Malicious code in fimanagementserv_ca (npm)
- Aug 14, 2025
Malicious code in filterui (npm)
- Aug 14, 2025
Malicious code in filter-stack (npm)
- Aug 14, 2025
Malicious code in filter-node-package (npm)
- Aug 14, 2025
Malicious code in filmoteca (npm)
- Aug 14, 2025
Malicious code in filmark (npm)
- Aug 14, 2025
Malicious code in filerc (npm)
- Aug 14, 2025
Malicious code in filename-id (npm)
- Aug 14, 2025
Malicious code in filedez (npm)
- Aug 14, 2025
Malicious code in filecrush (npm)
- Aug 14, 2025
Malicious code in file-test-decode-balance-secure (npm)
- Aug 14, 2025
Malicious code in file-logging (npm)
- Aug 14, 2025
Malicious code in file-load-validate-cat-decode (npm)
- Aug 14, 2025
Malicious code in file-corrupt-x00-detect (npm)
- Aug 14, 2025
Malicious code in file-alb-um-zip-new-mp3-the-argument-42zje-bbcgpm (npm)
- Aug 14, 2025
Malicious code in file-alb-um-zip-new-mp3-satanic-panic-in-the-attic-43hjw-elhfex (npm)
- Aug 14, 2025
Malicious code in file-alb-um-zip-new-mp3-none-shall-pass-9w6ra-hddlmn (npm)
- Aug 14, 2025
Malicious code in file-alb-um-zip-new-mp3-65426-satyagraha-1-lpo1l-rqohyk (npm)
- Aug 14, 2025
Malicious code in file-alb-um-zip-new-mp3-5722-vanishing-point-iu8kn-ggwnhe (npm)
- Aug 14, 2025
Malicious code in file-alb-um-zip-new-mp3-56040-vengeance-9f1kt-wcbqbj (npm)
- Aug 14, 2025
Malicious code in file-alb-um-zip-new-mp3-5298-reality-1-rymoz-ptimcb (npm)
- Aug 14, 2025
Malicious code in file-alb-um-zip-new-mp3-38030-too-legit-to-quit-0d58y-hddhtz (npm)
- MAL-2025-20537Malwarenpmfile-alb-um-zip-new-mp3-37992-alone-ii-the-home-recordings-of-rivers-cuomo-s7x6l-djjkakAug 14, 2025
Malicious code in file-alb-um-zip-new-mp3-37992-alone-ii-the-home-recordings-of-rivers-cuomo-s7x6l-djjkak (npm)
- Aug 14, 2025
Malicious code in file-alb-um-zip-new-mp3-35910-walking-in-london-t632p-ssrons (npm)
- Aug 14, 2025
Malicious code in file-alb-um-zip-new-mp3-35841-harbor-lights-hzhvw-aeyuch (npm)
- MAL-2025-20534Malwarenpmfile-alb-um-zip-new-mp3-345273-dancing-with-the-devil-the-art-of-starting-over-ox6x8-trglklAug 14, 2025
Malicious code in file-alb-um-zip-new-mp3-345273-dancing-with-the-devil-the-art-of-starting-over-ox6x8-trglkl (npm)
- Aug 14, 2025
Malicious code in file-alb-um-zip-new-mp3-283978-tim-melina-theo-bobby-bsdj4-wndzis (npm)
- Aug 14, 2025
Malicious code in file-alb-um-zip-new-mp3-200499-threads-i0tvt-cdrrmq (npm)
- MAL-2025-20531Malwarenpmfile-alb-um-zip-new-mp3-100573-ossuarium-silhouettes-unhallowed-riqt1-sxowryAug 14, 2025
Malicious code in file-alb-um-zip-new-mp3-100573-ossuarium-silhouettes-unhallowed-riqt1-sxowry (npm)
- Aug 14, 2025
Malicious code in filament-yakutsk-farout-scripts (npm)
- Aug 14, 2025
Malicious code in filament-protractor-library-css-minimizer-webpack-plugin (npm)
- Aug 14, 2025
Malicious code in filament-fermion-jasmine-fusion (npm)
- Aug 14, 2025
Malicious code in fikfifif (npm)
- Aug 14, 2025
Malicious code in fiissuerread-paypal (npm)
- Aug 14, 2025
Malicious code in figures-umbra-async-joviology (npm)
- Aug 14, 2025
Malicious code in figures-jest-astro-draco (npm)
Page 5580 of 6,634